Core habits
- Keep recovery phrases offline and private.
- Verify addresses and transaction details before signing.
- Separate high-value storage from experimental wallets.
- Review token approvals and contract permissions.
- Use hardware-backed signing where appropriate.
- Verify official domains and applications independently.